Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
661
SSL / Re: DNS Redirection problem for xxx.com with www and without it
« on: May 24, 2023, 02:48:23 AM »
Another pitfall for renewing certificates is if you have your web server (apache or nginx) set up to 301 redirect HTTP to HTTPS requests. You need to disable this temporarily while you renew your certificates. LetsEncrypt needs to connect to the server via standard port 80 (HTTP) for the renewal process to complete successfully.
662
Apache / Re: My apache has stopped working
« on: May 23, 2023, 05:28:06 AM »
Run a configuration test with apachectl:
If everything is ok, the configtest command will return the message Syntax OK. If there is a syntax error, configtest will output the invalid configuration option with the filename and the line number.
Code: [Select]
sudo apachectl configtest If everything is ok, the configtest command will return the message Syntax OK. If there is a syntax error, configtest will output the invalid configuration option with the filename and the line number.
663
E-Mail / Re: Can't Receive emails
« on: May 23, 2023, 05:25:14 AM »
And open all mail-related ports in the CSF firewall:
143,993,110,995,25,465,587
143,993,110,995,25,465,587
664
CentOS 7 Problems / Re: Pro no work???
« on: May 21, 2023, 08:19:30 AM »
I had one server stall out on an IP address update (basically to transfer the CWP Pro license). I had to contact support and they took care of it promptly. But I haven't seen that behavior lately. You can contact support if you do continue to experience problems.
665
CentOS-WebPanel Bugs / Re: Cronjob not added from user panel
« on: May 21, 2023, 08:17:23 AM »
It's my thinking 
I have about 50 users and believe me, they are almost all non-technical and they hand anything technical off to me to accomplish. Cronjobs definitely fall in that class -- so I have added them from the admin panel (or more likely, from the CLI). It actually allows me to vet what they are wanting to do and choose an appropriate run time and frequency so as not to tax the server. Believe me, one user frequently running a series of Magento cron jobs can really bog down a server!
I have about 50 users and believe me, they are almost all non-technical and they hand anything technical off to me to accomplish. Cronjobs definitely fall in that class -- so I have added them from the admin panel (or more likely, from the CLI). It actually allows me to vet what they are wanting to do and choose an appropriate run time and frequency so as not to tax the server. Believe me, one user frequently running a series of Magento cron jobs can really bog down a server!
666
DNS / Re: How to use 2 domains on one account?
« on: May 21, 2023, 08:11:32 AM »
You can certainly add another add on domain pointing to the same public_html directory. I do that on all my CWP servers. The add-on domains load the same site content as the main domain (in my case, WordPress installs).
667
Updates / Re: Bugs at 0.9.8.1156
« on: May 20, 2023, 12:45:42 PM »
I will test; haven't noticed any issues yet, but my servers are fairly static -- not a lot of user movement on them.
668
SSL / Re: Problem SSL certificate
« on: May 18, 2023, 09:36:12 PM »
Are you redirecting HTTP requests to HTTPS? Usually you need to set a 301 redirect from plain HTTP to the preferred HTTPS link. You can do this in your vhost conf or via .htaccess. Are you using Apache or Nginx?
669
CentOS 7 Problems / Re: Malware found
« on: May 18, 2023, 09:32:21 PM »
The most usual vector is a web shell under a WordPress install. Have you verified that all your accounts are clean? I run Security Center scans periodically, and each instance of WP runs both WordFence and iThemes Security plugins. Also lock down your CSF firewall to only the ports you need, block certain countries, change your SSH port, do not allow r00t login via SSH (almost never needed). Have you scanned for FritzFrog and other SSH exploits?
Try checking with rkhunter (Rootkit Hunter):
https://medium.com/logistimo-engineering-blog/a-way-to-detect-the-rootkits-and-exploits-in-centos-rhel-5b125a8d6a25
Try checking with rkhunter (Rootkit Hunter):
https://medium.com/logistimo-engineering-blog/a-way-to-detect-the-rootkits-and-exploits-in-centos-rhel-5b125a8d6a25
670
Installation / Re: Virtual machine install with redirect issues
« on: May 18, 2023, 02:53:41 AM »
What's with these new AI bots posting to the forum? Is someone experimenting with ChatGPT and seeing if it offers valid advice?
671
PHP Selector / Re: cant install any php version
« on: May 18, 2023, 02:51:51 AM »
And out of curiosity, why not PHP 5.6 and 7.4? Even though both are still EOL, they at least feature every available security patch for that code series.
672
CentOS 7 Problems / Re: hello, web try to update cwp get errors!!
« on: May 18, 2023, 02:45:25 AM »
I am not sure of Sandeep's warning -- is it an edge case? I have applied the GDBus workaround to 3x CWP servers and have not perceived any ill effects related to boot failures. I generally find rcschaff's advice salient and trustworthy, so I would say go for it, unless Sandeep can give more insight to the potential pitfalls of it.
673
Installation / Re: CentOS migration plan for 2024?
« on: May 18, 2023, 02:39:43 AM »
Josemnunez's announcement of EL9-support is the game changer I have been waiting for. So now the 2024 plan will be AlmaLinux 9 with CWP support. THANK YOU! Go CWP Team!
674
Installation / Re: New installation of CWP on Alma Linux 9. Will it work?
« on: May 18, 2023, 02:35:51 AM »
The main problem with Stream is that it is a rolling release and once you are in the stream, you have to stick with it -- no outs, no migration opportunity. You're married to it, for better or worse! I know the delayed repositories help to iron out the bleeding edge feel, but still it runs against my more conservative leanings. CWP devs probably pushed it initially due to it being the "official" replacement for CentOS, but really it's not adequate for conservative enterprise-grade server installs with long term support. It's more of a testbed for future RHEL releases, so it feels perpetually in beta. That's what gave rise to the Rocky and AlmaLinux distributions -- a viable, stable alternative for those wanting more of a "spiritual successor" to CentOS 7's LTS-class stability and support. For me, knowing there is a migration path with Rock or AlmaLinux is really what seals the deal. I am much more secure with that over running a rolling release like Stream. (And you can be sure I am not running Arch on the desktop either!) So for me, it's AlmaLinux in 2024 -- hopefully 9 if CWP is up for the challenging timeline!
675
E-Mail / Re: How to enable SSL/TLS and ports 995 and 465/587 for POP email
« on: May 16, 2023, 10:32:27 PM »
Take stock of what's running
Also allow your STARTTLS and SSL/TLS ports in CSF (/etc/csf/csf.conf):
Code: [Select]
lsof -i :25
lsof -i :465
lsof -i :587
lsof -i :110
lsof -i :143
lsof -i :993
lsof -i :995Also allow your STARTTLS and SSL/TLS ports in CSF (/etc/csf/csf.conf):
Code: [Select]
TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,993,995,2031,2083,2087,2096,2304"
PORTS_imapd = "143,993"
PORTS_pop3d = "110,995"
SMTP_PORTS = "25,465,587"
PORTS_smtpauth = "25,465,587"
PORTS_eximsyntax = "25,465,587"
